TACACS+ stuff

Yet another new service definition (in a group or user stanza). role should be set to the role definition name you created on the AMP.

service = AMP {
role = "AMP Administration"
}

Guy Morrell at the University of Oxford provides this snippet for Cisco WCS

service = ciscowlc {
role1 = ALL
}